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Top Stories 

• Three new spills along the South Platter River in Weld County, Colorado, brought the total 
amount of crude oil spilled to at least 34,500 gallons after severe flooding. - Associated 
Press (See item 1) 

• An unlicensed physician was sentenced for heading a stem cell scam in Las Vegas after 
prosecutors claimed he targeted terminally ill patients and exposed them to risky placenta 
implant procedures. - Associated Press (See item 21 ) 

• Officials in Chicago announced the arrest of 4 men in connection with a September 19 
shooting at a park that left 13 injured. - Associated Press (See item 24 ) 

• A Utah man accused of plotting a deadly armed attack at a shopping center in Salt Lake 
City was arrested. - Associated Press (See item 32 ) 
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Energy Sector 



1. September 24, Associated Press - (Colorado) More spills reported in Wattenberg oil 
patch following Colorado flooding. Three new spills September 24 brought the total 
amount of crude oil spilled to at least 34,500 gallons along the South Platte River in 
Weld County after severe flooding in Colorado. 

Source: http://www.huffingtonpost.com/2013/09/24/colorado-oil-spills- 
wattenberg n 3983923.html 

T Return to topi 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

2. September 24, Rutland Herald - (Vermont) Vt. Yankee at reduced power. The 
Vermont Yankee nuclear power plant in Brattleboro reduced power September 24 to 
allow Entergy Nuclear workers to inspect the oil level in a recirculation pump after a 
low-level alarm was triggered. 

Source: http://www.rutlandherald.com/article/20130924/THISJUSTIN/130929967 

3. September 24, Pittsburgh Post-Gazette - (Pennsylvania; Ohio) FirstEnergy plans 
major overhaul of Beaver Valley nuclear power plant. FirstEnergy announced that it 
plans to replace the steam generator and reactor vessel head at its Beaver Valley Unit 2 
nuclear reactor in Shippingport, Pennsylvania in 2017 and that it will also begin 
replacing the two steam generators at the Davis-Besse nuclear power plant near Toledo, 
Ohio, in February. 

Source: http://www.post-gazette.com/stories/local/region/firstenergy-plans-maior- 
overhaul-of-beaver-valley-nuclear-power-plant-704686/ 

T Return to topi 

Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. September 25, Softpedia - (International) ICG America hacked, credit card details 
possibly stolen. E-commerce and Internet marketing company ICG America notified 
customers that attackers compromised its systems and installed malware that was 
capable of capturing and decrypting payment information from its systems. The attack 
began in early January and continued until August 2. 

Source: http://news.softpedia.com/news/ICG-America-Hacked-Credit-Card-Details- 
Possibly-Stolen-386129.shtml 

5. September 25, CNNMoney - (International) Three ex-ICAP employees indicted in 
Libor scandal. The U.S. Department of Justice announced criminal charges September 
25 against three former employees of U.K.-based brokerage ICAP for their alleged role 
in helping to manipulate the London Interbank Offered Rate (LIBOR) by making false 
or misleading information to banks about short-term interest rates. 

Source: http://money.cnn.com/2013/09/25/news/companies/icap-libor/ 

6. September 24, U.S. Securities and Exchange Commission - (California) SEC charges 
former president of California-based investment firm with fraud. The U.S. 
Securities and Exchange Commission charged the former president of San Bernardino- 
based American Pacific Linancial Corporation with allegedly defrauding almost 500 
investors of $160 million by selling promissory notes under the false premise that they 
were backed up by properties and other collateral that was often impaired or 
nonexistent. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370539838921 

7. September 24, U.S. Securities and Exchange Commission - (Illinois; Texas) SEC 
charges two bank executive for financial misstatements and failure to disclose 
probable loss on troubled loan. The U.S. Securities and Exchange Commission 
charged two former executives at Mercantile Bancorp with failing to report a $5.28 
million loan loss, which also caused the false reporting of other information by the 
bank. The Armarillo, Texas-based former CEO and the Quincy, Illinois-based former 
CFO agreed to settle the charges by agreeing to pay $100,000 each and were barred 
from acting as an officer or director of a publicly traded company. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370539838242 

T Return to topi 

Transportation Systems Sector 

8. September 25, Associated Press - (Louisiana) Bomb threat forces plane to make 
emergency landing in Louisiana. An American Eagle plane landed at Monroe 
Regional Airport after a note about a bomb threat was found. The airport shut down 
and air traffic was diverted, however no devices were discovered during the 
investigation. 
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Source: http://www.huffingtonpost.com/2013/09/25/ap-us-airliner-bomb- 
threat n 3987623.html 



9. September 25, USA Today - (International) Royal Princess to resume scheduled 
cruises. A Princess Cruises ship lost power for over 3 hours September 22, leaving the 
new ship with minimal services. The vessel, carrying 3,594 passengers and 1,336 crew 
members, was on the seventh day of a 12-day trip from Venice to Barcelona. 

Source: http://www.usatodav.com/storv/travel/news/2013/09/25/royal-princess-power- 
outage-repairs/2867 195/ 

10. September 25, WGHP 8 High Point - (North Carolina) One taken to hospital after 
crash on Hwy 421 in Randolph Co. A collision closed one northbound lane of 
Highway 421 in Randolph County for 2 hours September 25. 

Source: http://myfox8 .com/20 1 3/09/25/one-taken-to-hospital-after-crash-on-hwy-42 1 - 
in-randolph-co/ 

11. September 24, Durango Herald - (Colorado) 2 die in Highway 550 head-on. A fatal 
accident closed both directions of U.S. Highway 550 near Durango for 2 hours 
September 24. 

Source: http://durangoherald.com/article/20130924/NEWS01/130929772/2-die-in- 
Highway-550-head-on- 

12. September 24, Cortez Journal - (Colorado) Crash on Hwy. 145 kills 2. A fatal head- 
on collision closed a section of Colorado Highway 145 near Dolores for nearly 2 hours 
September 24. 

Source: http://www.corteziournal.com/article/20130923/NEWS01/130929960/Crash- 
on-Hwy-145-kills-2- 

13. September 24, Florida Today - (Florida) Driver identified after fatal U.S. 1 crash in 
Titusville. A fatal collision closed U.S. Route 1 in Titusville for several hours 
September 24. 

Source: http://www.floridatodav.com/article/20130924/NEWS01/130924004/Driver- 
identified-after-fatal-U-S-l-crash-Titusville 

14. September 24, Los Angeles Times - (California) Northbound Interstate 5 in Gorman 
reopens after big rig crash. A collision involving three semi-trucks closed all 
northbound lanes at Highway 138 in Gorman for several hours September 24. The 
highway is the main artery from Southern California to the San Joaquin Valley. 

Source: http://www.latimes.com/local/lanow/la-me-ln-interstate-5-gorman-highway- 
reopened-20 1 30924,0,766302 1 .story 

15. September 24, Hannibal Courier-Post - (Missouri) Truck accident closes highway. 
An accident involving two semi-trucks closed U.S. Route 36 in Shelby County for 
around 4 hours September 24. 

Source: http://www.hannibal.net/article/20130924/NEWS/130929387 
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Food and Agriculture Sector 

16. September 24, Food Safety News - (Washington) Single Whole Foods store in Seattle 
recalls Kale for Listeria. A Whole Foods Market store in Seattle recalled prepackaged 
fresh kale due to possible contamination of Listeria monocytogenes. The product was 
sold in rectangular plastic calmshells labeled Whole Foods Market Kales Mixed OG 
(Organic). 

Source: http://www.foodsafetynews.com/2013/Q9/single-whole-foods-store-in-seattle- 
recalls-kale-for-listeria/ 

17. September 23, U.S. Food and Drug Administration - (National) Garden Fresh Foods, 
Inc. expanded recalls on specific packages of products because of possible health 
risk. A voluntary recall on various ready-to-eat salads, slaw, and dip products sold 
under various brands and code dates was expanded by Garden Fresh Foods because the 
products may be contaminated with Listeria monocytogenes. 

Source: http://www.fda.gov/Safety/Recalls/ucm369670.htm 

18. September 23, Food Safety News - (National) Weis brand salads recalled for possible 
Listeria contamination. Weis Quality salads were recalled by Weis Markets, Inc. for 
possible Listeria contamination. Around 21,000 Weis Club members who bought the 
salads were advised of the recall by telephone calls directly from the supermarket 
chain. 

Source: http://www.foodsafetynews.com/2013/09/weis-brand-salads-recalled-for- 
possible-listeria-contamination/ 



T Return to topi 

Water and Wastewater Systems Sector 

19. September 25, Merced Sun-Star - (California) Bypass in place, Dos Palos will begin 
replacing drinking water system. The city of Dos Palos brought a temporary water 
bypass system online to allow work to begin on a filter system that has been impeded 
by high levels of algae. The county was issued a boil water advisory as replacing the 
system could take up to 2 weeks. 

Source: http://www.mercedsunstar.com/2013/09/24/3241189/bypass-in-place-dos- 
palos-will.html 

20. September 24, Associated Press - (Arizona) BIA to pay $136,000 penalty for water 
violations. The U.S. Environmental Protection Agency reached a settlement with the 
Department of Interior’s Bureau of Indian Affairs (BIA) after the BIA exceeded 
drinking water standards for arsenic and used inadequate monitoring at the public water 
supply system in Kearns Canyon. BIA will pay a $136,000 penalty and has since 
brought monitoring to compliance. 

Source: http://www.islandpacket.com/2013/09/24/2701968/bia-to-pav-136000-penaltv- 
for.html 
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Healthcare and Public Health Sector 

21. September 24, Associated Press - (Nevada) Unlicensed doc gets prison in Vegas stem 
cell scam. An unlicensed physician was sentenced September 24 for heading a stem 
cell scam in Las Vegas after prosecutors claimed he targeted terminally ill patients and 
exposed them to risky placenta implant procedures. He and his company, StemCell 
Pharma Inc., made approximately $1 million from patients and investors. 

Source: http://news.msn.com/crime-iustice/unlicensed-doc-gets-prison-in-vegas-stem- 
cell-scam 



22. September 24, KDKA 2 Pittsburgh - (Pennsylvania) 9 sickened by odor in building 
on Jefferson Medical Center campus. A building at the Jefferson Regional Medical 
Center in Pennsylvania was evacuated after 9 people fell ill due to an unknown odor. 
The individuals were treated and officials are investigating the cause of the odor. 
Source: http://pittsburgh.cbslocal.com/2013/09/24/8-sickened-by-odor-in-building-on- 
jefferson-regional-medical-center-campus/ 
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Government Facilities Sector 

23. September 25, WUSA 9 Washington, D.C. - (Maryland) Several students, SUV driver 
hospitalized after Md. school bus crash. Four students and one adult were taken to a 
local hospital after a North Point High School bus and an SUV crashed September 25 
in Waldorf. 

Source: http://washington.cbslocal.com/2013/09/25/school-bus-involved-in-serious- 
wreck-in-waldorf/ 

24. September 24, Associated Press - (Illinois) Gang member sought revenge in Chicago 
park shooting. Officials announced the arrest of 4 men in connection to a September 
19 shooting at a Chicago park that left 13 injured. Authorities believe retaliation 
between rival gangs prompted the shooting. 

Source: http://news.msn.com/crime-iustice/gang-member-sought-revenge-in-chicago- 
park-shooting 

25. September 24, Longmont Times-Call - (Colorado) St. Vrain State Park closed as 
flood damaged assessed, repaired. Colorado Parks and Wildlife announced St. Vrain 
State Park will remain closed indefinitely while officials continue to assess and repair 
flood damages to the park. 

Source: http://www.timescall.com/news/colorado-flood/ci 24 1 67578/st- vrain-state- 
park-closed-flood-damages-assessed 

26. September 24, Computerworld - (Virginia) Virginia Tech breach exposes data on 
145K job applicants. Virginia Tech announced September 24 that human error caused 
a data breach that may have exposed personal data of 145,000 individuals who applied 
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online for jobs at the school over the past 10 years. School officials became aware of 
the breach August 28 and determined the server was placed in service without proper 
cyber protection, thus allowing illegal access to the data. 

Source: http://www.networkworld.com/news/2013/092413-virginia-tech-breach- 
exposes-data-274154.html 

For another story, see item 20 
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Emergency Services Sector 

27. September 25, Fox News; Associated Press - (Ohio) Headquarters of Columbus 

Police Department reopens after evacuation. A battery being used in a construction 
project popped off and caused an explosion September 24, prompting the evacuation of 
the headquarters of the Columbus Police Department for several hours. The 
headquarters reopened September 25. 

Source: http://www.foxnews.com/us/2013/09/25/headquarters-columbus-police- 
department-evacuated-after-explosion/ 

28. September 24, Associated Press - (Oklahoma) 8 inmates recaptured after van 
vanishes in Okla. Two inmates broke out of a locked compartment inside a transport 
van in Weatherford September 24 after guards left the inmates alone in the van with the 
keys. All 8 inmates that escaped were recaptured several hours later by police 
Source: http://www.utsandiego.com/news/2013/sep/24/8-inmates-recaptured-after-van- 
vanishes-in-okla/ 
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Information Technology Sector 

29. September 25, Softpedia - (International) Tumblr fixes DOM XSS vulnerability 2 
months after being notified. Tumblr fixed a DOM-based cross-site scripting (XSS) 
vulnerability that could be used for spam, spreading malware, and phishing attacks 2 
months after a security researcher informed Tumblr of the issue. 

Source: http://news.softpedia.com/news/Tumblr-Fixes-DOM-XSS-Vulnerability-2- 
Months-After-Being-Notified-385986.shtml 

30. September 24, Softpedia - (International) Phone numbers harvested from Craigslist 
used in SMS scam. Symantec researchers identified a scam campaign targeting 
individuals who have posted ads on Craigslist that appears to be using automated 
harvesting tools to collect phone numbers in posts and then send SMS messages to the 
numbers which attempt to get targets to access a link on their PC. The link then takes 
the user to a fake version of GIMP that installs several additional pieces of software 
used by scammers to generate money via affiliate programs. 

Source: http://news.softpedia.com/news/Phone-Numbers-Harvested-from-Craigslist- 



- 7 - 



Used-in-SMS-Scam-385869.shtml 



31. September 24, Threcitpost - (International) After botched update, Apple releases 
Apple TV 6.0, fixes 50+ bugs. Apple re-released an update for its Apple TV product 
September 23, addressing 57 bugs. The 6.0 update was originally released September 
22, but several users complained that the update caused issues for their devices. 
Source: http://threatpost.com/after-botched-update-apple-releases-apple-tv-6-0-fixes- 
50-bugs/102399 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

Nothing to report 



T Return to tool 



Commercial Facilities Sector 

32. September 24, Associated Press - (Utah) Man accused of plot to shoot up Salt Lake 
mall. A Utah man accused of plotting a deadly attack at the City Creek shopping center 
in Salt Lake City September 25 was arrested September 23. Authorities said that the 
suspect told investigators he planned to "randomly shoot and kill people." 

Source: http://news.msn.com/crime-iustice/man-accused-of-plot-to-shoot-up-salt-lake- 
mall 
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Dams Sector 



Nothing to report 
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NTAS 
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NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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